Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/9CE4C21A529D11F18D46C3C192833773.roa
File:                     9CE4C21A529D11F18D46C3C192833773.roa (raw, json)
Hash identifier:          kX8m+nWcUbQ9J0nvLbCc5JsNCCExflB9wLpG2VcDqXc=
Subject key identifier:   FB:65:56:FD:1C:87:C0:0F:AD:06:5A:49:C5:D2:AB:D6:88:FE:39:55
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       EAFF
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/9CE4C21A529D11F18D46C3C192833773.roa
Signing time:             Sun 31 May 2026 17:48:37 +0000
ROA not before:           Sun 31 May 2026 17:48:37 +0000
ROA not after:            Thu 01 Oct 2026 00:00:00 +0000
asID:                     154680
IP address blocks:        2402:5ea0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Jun 2026 06:09:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 60159 (0xeaff)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May 31 17:48:37 2026 GMT
            Not After : Oct  1 00:00:00 2026 GMT
        Subject: CN=6a1c7474-de7d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:17:c0:97:e1:53:a4:57:86:19:35:cc:76:af:
                    66:da:93:8d:c8:0a:b5:9f:ed:cd:26:4f:6e:2f:30:
                    ce:b4:21:30:4c:80:a6:54:0f:76:49:fd:ab:3f:62:
                    ef:ab:02:09:f8:d6:f8:ba:cf:5b:b6:ac:41:3a:0f:
                    5b:00:ce:af:17:e4:34:bb:3a:a2:73:0c:86:72:d1:
                    96:fd:6e:ff:00:3b:49:d4:35:ac:f0:fe:ab:ba:0c:
                    42:54:fb:59:26:5f:84:6b:09:7f:55:ae:8d:00:82:
                    9e:64:7a:69:01:c7:ae:b7:4b:a3:3f:82:43:bc:26:
                    80:d0:95:5d:2a:d2:30:7c:4e:52:41:96:fd:72:35:
                    45:e5:61:e2:33:ca:4d:f4:d1:5c:10:ba:ad:d1:d4:
                    f2:0e:94:d0:e2:b3:ce:14:46:fc:5d:9b:bf:82:23:
                    f2:c7:08:83:9f:66:d3:37:32:b5:92:80:cc:fe:62:
                    49:0c:a3:3d:74:b1:b8:12:2b:ee:f7:06:a9:7e:d3:
                    00:b0:a1:3d:31:42:6f:c0:b1:ed:e8:29:ce:2d:12:
                    83:62:d6:52:c7:84:25:29:34:e9:0c:5a:8e:19:ef:
                    bb:46:19:6c:55:e2:49:b3:52:57:24:74:63:07:1f:
                    b7:94:b4:ad:0f:66:5b:f3:51:50:11:0a:8c:43:da:
                    f8:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:65:56:FD:1C:87:C0:0F:AD:06:5A:49:C5:D2:AB:D6:88:FE:39:55
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/9CE4C21A529D11F18D46C3C192833773.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:5ea0::/32

    Signature Algorithm: sha256WithRSAEncryption
         ac:3c:dc:61:cb:90:59:0f:07:16:0b:bf:dc:f0:af:ca:dc:d9:
         b0:e5:0a:33:7d:bc:e3:fe:72:eb:39:de:91:9c:7c:6b:c3:02:
         43:e6:9e:0d:ae:89:0d:68:64:f0:ad:b7:7d:3e:e5:f6:d1:6e:
         31:77:84:c1:89:37:b8:2d:02:8f:a1:e1:35:3b:16:17:a7:a0:
         54:8f:03:12:9d:f3:08:0e:e1:6b:57:8a:17:04:48:4f:d9:b7:
         e5:73:06:f3:d1:eb:e1:b6:37:7d:85:3e:4d:2f:96:3f:97:45:
         2f:29:59:58:a4:16:89:a3:cb:b7:ee:93:0f:6e:cf:31:0d:af:
         59:64:f7:f0:c5:92:f9:c2:c1:1a:76:0a:af:5f:7c:66:12:4c:
         bc:0a:f5:22:4a:b9:c5:df:4e:67:e8:02:d0:13:d3:5c:ce:69:
         51:8e:85:d0:27:69:cc:80:d9:c9:a0:56:39:7e:ec:9f:56:cc:
         52:08:76:6f:af:16:1a:8f:09:cb:9a:9b:08:63:ed:96:27:5a:
         1c:83:1d:1b:07:0c:69:a1:a3:7b:aa:00:35:fc:d5:5b:65:a2:
         c1:a9:ac:35:8f:23:28:03:5b:83:ac:c3:07:f5:dc:51:6c:0e:
         6d:1b:d7:5a:c8:d1:ec:41:8c:76:a4:13:d4:4c:c1:51:f1:85:
         5a:a2:aa:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 10:00:16 2026 by rpki-client